CVE-2025-49823
0.08%V4
2025-06-17
02h21 +00:00
02h21 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Conda Constructor Command Injection via Unsanitized User Input (Low)
(conda) Constructor is a tool which allows constructing an installer for a collection of conda packages. Prior to version 3.11.3, shell installer scripts process the installation prefix (user_prefix) using an eval statement, which executes unsanitized user input as shell code. Although the script runs with user privileges (not root), an attacker could exploit this by injecting arbitrary commands through a malicious path during installation. Exploitation requires explicit user action. This issue has been patched in version 3.11.3.CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Neutralization of Special Elements used in a Command The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
EPSS
EPSS 是一种预测漏洞被利用可能性的评分模型。
EPSS 评分
EPSS 模型生成一个介于 0 到 1（即 0% 到 100%）之间的概率评分。评分越高，漏洞被利用的可能性越大。
EPSS 百分位
百分位用于根据 EPSS 评分对 CVE 进行排名。例如，EPSS 百分位为第 95 的 CVE，其被利用的可能性高于 95% 的其他 CVE。因此，百分位可用于比较不同 CVE 的 EPSS 评分。
参考资料
https://github.com/conda/constructor/security/advisories/GHSA-44q9-rg2q-5g99
Tags : x_refsource_CONFIRM
Tags : x_refsource_CONFIRM
https://github.com/conda/constructor/commit/ce4c2d58cfcde2f62d038fb8aba013176c77a0b1
Tags : x_refsource_MISC
Tags : x_refsource_MISC
